This commit is contained in:
Kiara Grouwstra 2025-06-01 20:19:56 +02:00
parent bce45629b9
commit 107fd151e6
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU

View file

@ -171,6 +171,7 @@ NixOS is a Linux distribution with a [vibrant](https://repology.org/repositories
As such, we see NixOS as the only viable way to reliably create a reproducible outcome for all the work we create. As such, we see NixOS as the only viable way to reliably create a reproducible outcome for all the work we create.
Considered alternatives include: Considered alternatives include:
- containers: do not by themselves offer the needed reproducibility - containers: do not by themselves offer the needed reproducibility
#### [npins](https://github.com/andir/npins) #### [npins](https://github.com/andir/npins)
@ -178,6 +179,7 @@ Considered alternatives include:
Npins is a dependency pinning tool for Nix which leaves recursive dependencies explicit, keeping the consumer in control. Npins is a dependency pinning tool for Nix which leaves recursive dependencies explicit, keeping the consumer in control.
Considered alternatives include: Considered alternatives include:
- Flakes: defaults to implicitly following recursive dependencies, leaving control with the publisher. - Flakes: defaults to implicitly following recursive dependencies, leaving control with the publisher.
### [OpenTofu](https://opentofu.org/) ### [OpenTofu](https://opentofu.org/)
@ -187,6 +189,7 @@ This has led it to offer a vibrant ecosystem of 'provider' plugins integrating v
As such, it can facilitate automated deployment pipelines, including with — relevant to our project — hypervisors and DNS programs. As such, it can facilitate automated deployment pipelines, including with — relevant to our project — hypervisors and DNS programs.
Considered alternatives include: Considered alternatives include:
- Terraform: not open-source - Terraform: not open-source
### [Proxmox](https://proxmox.com/) ### [Proxmox](https://proxmox.com/)
@ -195,6 +198,7 @@ Proxmox is a hypervisor, allowing us to create VMs for our applications while ad
In addition, it has been [packaged for Nix](https://github.com/SaumonNet/proxmox-nixos) as well, simplifying our requirements to users setting up our software. In addition, it has been [packaged for Nix](https://github.com/SaumonNet/proxmox-nixos) as well, simplifying our requirements to users setting up our software.
Considered alternatives include: Considered alternatives include:
- OpenNebula: seemed less mature - OpenNebula: seemed less mature
### [Garage](https://garagehq.deuxfleurs.fr/) ### [Garage](https://garagehq.deuxfleurs.fr/)
@ -203,6 +207,7 @@ Garage is a distributed object storage service.
For compatibility with existing clients, it reuses the protocol of Amazon S3. For compatibility with existing clients, it reuses the protocol of Amazon S3.
Considered alternatives include: Considered alternatives include:
- file storage: less centralized for backups - file storage: less centralized for backups
### [PostgreSQL](https://www.postgresql.org/) ### [PostgreSQL](https://www.postgresql.org/)
@ -211,6 +216,7 @@ PostgreSQL is a relational database.
It is used by most of our applications. It is used by most of our applications.
Considered alternatives include: Considered alternatives include:
- Sqlite: default option for development in many applications, but less optimized for performance, and less centralized for backups - Sqlite: default option for development in many applications, but less optimized for performance, and less centralized for backups
### [Valkey](https://valkey.io/) ### [Valkey](https://valkey.io/)
@ -219,6 +225,7 @@ Valkey is a key-value store.
It is an open-source fork of Redis. It is an open-source fork of Redis.
Considered alternatives include: Considered alternatives include:
- Redis: not open-source - Redis: not open-source
### [OpenSearch](https://opensearch.org/) ### [OpenSearch](https://opensearch.org/)
@ -227,6 +234,7 @@ OpenSearch offers full-text search, and is used for this in many applications.
It is an open-source fork of ElasticSearch. It is an open-source fork of ElasticSearch.
Considered alternatives include: Considered alternatives include:
- ElasticSearch: not open-source - ElasticSearch: not open-source
### [PowerDNS](https://github.com/PowerDNS/pdns) ### [PowerDNS](https://github.com/PowerDNS/pdns)
@ -234,6 +242,7 @@ Considered alternatives include:
PowerDNS is a mature DNS server. It further offers an admin front-end. PowerDNS is a mature DNS server. It further offers an admin front-end.
Considered alternatives include: Considered alternatives include:
- hickory-dns: no front-end - hickory-dns: no front-end
- core-dns: no front-end - core-dns: no front-end
@ -242,6 +251,7 @@ Considered alternatives include:
Authelia is a single sign-on provider that integrates with LDAP. Authelia is a single sign-on provider that integrates with LDAP.
Considered alternatives include: Considered alternatives include:
- KaniDM: does not do proper LDAP - KaniDM: does not do proper LDAP
- Authentik: larger package with focus on many things we do not need - Authentik: larger package with focus on many things we do not need
- Keycloak: larger package with focus on many things we do not need - Keycloak: larger package with focus on many things we do not need
@ -251,5 +261,6 @@ Considered alternatives include:
Lldap is a light LDAP server, allowing to centralize user roles across applications. Lldap is a light LDAP server, allowing to centralize user roles across applications.
Considered alternatives include: Considered alternatives include:
- 389 DS: older larger package - 389 DS: older larger package
- FreeIPA: wrapper around 389 DS - FreeIPA: wrapper around 389 DS